When are Access Token Revoked?

Zoom Apps
1

Hello,

We continue to experience a lot of return calls from the API saying that the token of XYZ user is revoked. This is affecting the experience of our clients and we are trying to figure out what are all the possible scenarios that could revoke a token. So far we have noticed these scenarios:

  1. If a token is not refresh within certain window, the token will become expired, which would require the user to integrate their Zoom account into our system.
  2. If a user connects their Zoom account to more than one account in our system, the previously connected account will get their token revoked.
  3. We have noticed that if a user connects their Zoom account in more than one device, previously connected accounts will also get revoked.

My question is, are there more scenarios in which Zoom revokes access tokens? I have not been able to get or find an official answer yet, and at this point we have many furious clients that continue to experience intermittent connections with their Zoom account and our app. Knowing if there are more scenarios that we need to take into consideration will help our client experience team as well as the development team in case we need to change some code logic or safeguards to prevents these disconnects in the future.

Thanks

2

Great question @ariverapagan! Those scenarios are correct. Either an access token expires or a user install an application again which invalidates the previous access token whether on a new device or not.

The only other scenario is if you call the refresh_token API. While you will get a new token, the old token becomes invalid.

I hope that helps! Let me know if you have any questions.